Views:
Provides specific information about the virus/malware detections on your network, such as the managed product that detected the viruses/malware, the name of the virus/malware, and the infected endpoint

Detailed Virus/Malware Information Data View

Data
Description
Received
The date and time Apex Central received the data from the managed product
Generated
The date and time the managed product generated the data
Product Entity/Endpoint
Depending on the related source:
  • The display name of the managed product server in Apex Central
  • The name or IP address of the endpoint
Product
The name of the managed product or service
Example: Apex One, ScanMail for Microsoft Exchange
Product/Endpoint IP
Depending on the related source:
  • The IP address of the managed product server
  • The IP address of the endpoint
Product/Endpoint MAC
Depending on the related source:
  • The MAC address of the managed product server
  • The MAC address of the Security Agent endpoint
Managing Server Entity
The display name of the managed product server in Apex Central to which the endpoint reports
Domain
The domain of the managed product server to which the endpoint reports
Virus/Malware
The name of the security threat
Endpoint Infection Channel
The channel that the threat originated from
Endpoint
The name or IP address of the endpoint
Source Host
The IP address or name of the endpoint from which the security threat originated
User
The logged on user name at the time of the event
Result
The result of the action taken by the managed product
Action
The action taken by the managed product
Detections
The total number of detections
Example: Apex One detects 10 virus instances of the same virus on one computer.
Detections = 10
Entry Type
The entry point of the security threat
Detailed Information
A link that displays additional information about the specific detection
Apex One Domain Hierarchy
The agent tree domain or subdomain to which the Security Agent belongs
Department
The Active Directory department to which the endpoint belongs
Operating System
The operating system on the endpoint
Pattern/Rule
The pattern or rule that triggered the detection
Pattern/Rule Version
The version of the pattern or rule that triggered the detection
Cloud Service Vendor
The name of the cloud service vendor
File
The name of the file object or the program that executed the process
File Path
The path of the file object or the path of the program that executed the process